City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.11.135.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.11.135.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 02:37:27 CST 2025
;; MSG SIZE rcvd: 10594.135.11.41.in-addr.arpa domain name pointer vc-kzn-41-11-135-94.umts.vodacom.co.za.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
94.135.11.41.in-addr.arpa name = vc-kzn-41-11-135-94.umts.vodacom.co.za.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.99.164.211 | attackspam | Dec 17 03:11:06 cumulus sshd[29900]: Invalid user rafal from 167.99.164.211 port 55090 Dec 17 03:11:06 cumulus sshd[29900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.164.211 Dec 17 03:11:08 cumulus sshd[29900]: Failed password for invalid user rafal from 167.99.164.211 port 55090 ssh2 Dec 17 03:11:08 cumulus sshd[29900]: Received disconnect from 167.99.164.211 port 55090:11: Bye Bye [preauth] Dec 17 03:11:08 cumulus sshd[29900]: Disconnected from 167.99.164.211 port 55090 [preauth] Dec 17 03:22:00 cumulus sshd[30542]: Invalid user nfs from 167.99.164.211 port 60620 Dec 17 03:22:00 cumulus sshd[30542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.164.211 Dec 17 03:22:02 cumulus sshd[30542]: Failed password for invalid user nfs from 167.99.164.211 port 60620 ssh2 Dec 17 03:22:02 cumulus sshd[30542]: Received disconnect from 167.99.164.211 port 60620:11: Bye Bye [preauth]........ ------------------------------- |
2019-12-20 16:00:41 |
| 222.119.159.103 | attackbots | 1576823346 - 12/20/2019 07:29:06 Host: 222.119.159.103/222.119.159.103 Port: 23 TCP Blocked |
2019-12-20 16:04:34 |
| 109.215.52.137 | attackbotsspam | Dec 20 02:22:54 ny01 sshd[21493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.215.52.137 Dec 20 02:22:56 ny01 sshd[21493]: Failed password for invalid user kengo from 109.215.52.137 port 57346 ssh2 Dec 20 02:28:06 ny01 sshd[22514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.215.52.137 |
2019-12-20 15:35:57 |
| 210.245.26.142 | attackspam | Dec 20 09:06:06 debian-2gb-nbg1-2 kernel: \[481929.627821\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=210.245.26.142 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=49555 PROTO=TCP SPT=57593 DPT=9740 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-20 16:08:06 |
| 185.153.199.201 | attackbotsspam | Portscan or hack attempt detected by psad/fwsnort |
2019-12-20 16:05:01 |
| 36.112.131.60 | attack | Dec 19 21:22:51 php1 sshd\[7326\]: Invalid user home from 36.112.131.60 Dec 19 21:22:51 php1 sshd\[7326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.131.60 Dec 19 21:22:52 php1 sshd\[7326\]: Failed password for invalid user home from 36.112.131.60 port 54574 ssh2 Dec 19 21:30:17 php1 sshd\[8394\]: Invalid user pcap from 36.112.131.60 Dec 19 21:30:17 php1 sshd\[8394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.131.60 |
2019-12-20 15:42:27 |
| 163.172.204.185 | attackspam | SSH brute-force: detected 7 distinct usernames within a 24-hour window. |
2019-12-20 15:49:06 |
| 88.132.237.187 | attackspam | web-1 [ssh_2] SSH Attack |
2019-12-20 16:06:32 |
| 104.236.71.107 | attack | Automatic report - XMLRPC Attack |
2019-12-20 15:42:54 |
| 221.143.43.142 | attack | Dec 20 08:21:46 sd-53420 sshd\[26253\]: User root from 221.143.43.142 not allowed because none of user's groups are listed in AllowGroups Dec 20 08:21:46 sd-53420 sshd\[26253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.143.43.142 user=root Dec 20 08:21:47 sd-53420 sshd\[26253\]: Failed password for invalid user root from 221.143.43.142 port 45294 ssh2 Dec 20 08:28:22 sd-53420 sshd\[28744\]: User root from 221.143.43.142 not allowed because none of user's groups are listed in AllowGroups Dec 20 08:28:22 sd-53420 sshd\[28744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.143.43.142 user=root ... |
2019-12-20 15:51:10 |
| 69.94.131.81 | attack | Postfix DNSBL listed. Trying to send SPAM. |
2019-12-20 15:46:31 |
| 86.21.205.149 | attackspambots | Dec 20 08:16:32 vps691689 sshd[27074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.21.205.149 Dec 20 08:16:34 vps691689 sshd[27074]: Failed password for invalid user vcsa from 86.21.205.149 port 54790 ssh2 Dec 20 08:22:31 vps691689 sshd[27268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.21.205.149 ... |
2019-12-20 15:33:00 |
| 106.13.25.242 | attackspambots | Dec 20 08:34:15 loxhost sshd\[25361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.242 user=root Dec 20 08:34:16 loxhost sshd\[25361\]: Failed password for root from 106.13.25.242 port 52098 ssh2 Dec 20 08:38:48 loxhost sshd\[25504\]: Invalid user rpm from 106.13.25.242 port 38382 Dec 20 08:38:48 loxhost sshd\[25504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.242 Dec 20 08:38:50 loxhost sshd\[25504\]: Failed password for invalid user rpm from 106.13.25.242 port 38382 ssh2 ... |
2019-12-20 15:57:57 |
| 37.150.231.68 | attackbotsspam | Host Scan |
2019-12-20 15:36:48 |
| 124.195.199.171 | attackspam | Host Scan |
2019-12-20 16:01:06 |